writeups.xyz / CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js

Submitter : c2a

Date: 20 May 2024

Bounty : undisclosed

Vulnerabilities :

• XSS

Programs :

• Mozilla (PDF.js)

Authors :

• Thomas Rinsma (@Thomasrinsma)

Link :
https://codeanlabs.com/blog/research/cve-2024-4367-arbitrary-js-execution-in-pdf-js/